Account Recovery thoroughly explained

Account recovery is a process designed to get you back into your Apple Account when you don’t have enough information to reset your password.

Account Recovery is the final option that you can use to regain access to your Apple Account. This option should ONLY be used when all other attempts have failed to regain access to your account. The reason this is considered the final option to use is due to the timeframe it can take for the recovery process to complete.

IMPORTANT: This means that setting up Account Recovery will not result with you being able to regain access to your Apple Account immediately; but rather, you will be given a timeframe of when you will be able to regain access, based on the information you were able to successfully confirm upon setting the recovery up.

Note – “All other attempts” explained:

Following all the steps outlined in If you forgot your Apple ID password and confirming they were unsuccessful. Account Recovery should not be set up until after referencing and following the steps in this article.

Note — estimated timeframe explained:

The estimated timeframe required until you’re able to regain access to your Apple Account will vary. Technically, you determine the timeframe you will have to wait, and this is done based on how much of your own account information you can successfully confirm when setting up Account Recovery. 

This means that the more information you have available to verify your identity, the quicker you will be able to regain access to your account.

For example, someone who is able to confirm the verification code sent to their trusted phone number, and their primary payment on file with their Apple Account will regain access faster than someone who couldn’t confirm but one piece of account information, such as a verification code sent to the Apple Account email address.

• the current trusted phone number on file
• the Apple Account email address
• primary payment method on file with the Apple Account
• access to a trusted device

Your Apple Account is the account you use to access Apple services like the App Store, Apple Music, iCloud, iMessage, FaceTime, and more. Your account includes the email address and password you use to sign in as well as the contact, payment, and security details you use across Apple services. This account information can be used to verify your identity, and recover your account when needed. Every Apple service or feature will be associated to your Apple Account, so it is important to retain access to your account. 

It’s also important to remember that you will be limited with your access and use of your Apple Account or its related services while in Account Recovery. This means that you will not be able to access or use any feature or service that requires the Apple Account to be fully signed into iCloud Settings.

Note – ‘its related services‘ explained:

An example of this would be Apple Pay; this includes Apple Cash and Apple Card. To access Apple Pay cards, passes, IDs, etc in Wallet you must be fully signed into iCloud Settings. When you sign out of iCloud Settings, all associated cards in Wallet are removed from the device. 

If you are signed in, but not fully signed in to iCloud Settings, your cards will still appear in Settings > Wallet & Apple Pay, but you will be prompted to enter your Apple Account password. 

Note – ‘not fully signed into iCloud Settings‘ explained:

This occurs when you go to Settings > tap on your Name > tap on Sign in & Security, and then you are prompted to enter your password to continue. You are signed in, but not fully signed in. 

This is exactly the same scenario as when you change your Apple Account password in Settings and select the option to “Sign out of other devices” and then you have to enter the Apple Account password again on those other devices to continue using your account.

Two-factor authentication is an extra layer of security for your Apple Account designed to ensure that you’re the only person who can access your account, even if someone knows your password. 

It protects your account by requiring a password and access to either a trusted device or verification code delivered via SMS or phone call to your trusted phone number. Requiring more than just your password to access your account improves the security of your Apple Account and all personal information you store with Apple. 

Apple accounts that use two-factor authentication are the only accounts that are eligible to set up Account Recovery. 

If you created your Apple ID on a device with iOS 13.4, iPadOS 13.4, macOS 10.15.4, or later, your account automatically uses two-factor authentication. If you aren’t sure if you use two-factor authentication, and you forgot your password, go to iforgot.apple.com. After entering your Apple Account email address, if you aren’t prompted to confirm your trusted phone number, then you aren’t using two-factor authentication. This post will not help you recover your account. Use If you forgot the answers to your Apple ID security questions instead.

For additional information on two-factor authentication, use these articles:

This option is only available to Apple Accounts that have two-factor authentication enabled, and do not have a Recovery Key enabled.

Account Recovery is typically used in the following common scenarios:

• No access to trusted phone number or changed number
• No access to passcode-protected trusted device(s); this includes offline, lost, stolen, damaged, and/or defective devices
• Forgotten Apple ID password

Always attempt to set up account recovery on the affected device.

If the affected device is unavailable, attempt to initiate account recovery from the Apple Support app on a family member’s iOS or iPadOS device or at an Apple Store.

If you set up account recovery from Settings on a trusted device, you can continue to use that specific device.

You must turn off all other trusted devices. The devices must be powered off until you complete account recovery. If your Apple Account won’t stay in account recovery, other trusted devices might have the password saved.

Submitting the account recovery request does not stop you from using the Apple Account.

It does however limit certain things that can be used or accessed if not fully signed into iCloud settings.

Below are the steps to take leading up to setting up Account Recovery. Reference and follow these steps, in order, before setting up Account Recovery. 

TIP: If it helps, use the steps as a checklist based on your specific situation. For example, if you do not have a trusted device, cross it off the list and move to the next option you have available to regain access to your account.

Account Recovery will always be the last option in the checklist, never the first:

[ ] Use a trusted device.

[ ] Receive a verification code sent to a trusted phone number. 

[ ] Consult Account Recovery Contact(s) for a recovery code. 

[ ] Set up Account Recovery. 

A trusted device is an iPhone, iPad, iPod touch, Apple Watch, or Mac that you’ve already signed into iCloud Settings with. It’s a device that Apple knows is yours and that can be used to verify your identity by displaying a verification code from Apple when you sign in on a different device or browser.

• You can reset your password using a trusted iOS, iPadOS, or watchOS device in Settings > tap on your Name at the top > tap on Sign in & Security > tap on Change Password.
• If your Mac has an administrator password, you can use it to reset your Apple Account password. 
• You can also use iforgot.apple.com to send password reset instructions to all your trusted devices. Note that these devices must be passcode protected to use this option.

If you don’t have access to a trusted device, use your trusted phone number instead. A trusted phone number is a number that can be used to receive verification codes by text message or automated phone call. You must verify at least one trusted phone number to enroll in two-factor authentication.

There are two ways you can reset your Apple Account password by using your trusted phone number:

Apple Support App

You can try to reset your password using a trusted phone number and the Apple Support app on another iOS device. Open the Support app > tap on Reset Password > tap on Help Someone Else > enter your Apple Account email address > confirm the trusted phone number and receive a code sent to it to change the password. 

iOS Setup Assistant 

If you are setting up a new device and you have access to a trusted phone number, you can receive a verification code in the iOS Setup Assistant.

IMPORTANT: Note that the device must have activated cellular service already. If it hasn’t, you’ll have to complete the setup assistant without signing in to the Apple Account, make sure cellular is set up, and then erase all content and settings to restart on the Setup Assistant and try this option. Doing this is only recommended if you insist on restoring from an iCloud Backup and/or using Quick Start. If the device is eSIM only, make sure to select the option of keeping the eSIM upon selecting ‘Erase all Content and Settings.’ 

If you still have access to the trusted phone number, but the issue lies with the device and/or if you have a replacement physical SIM card with your same number but do not have access to a trusted device; put your SIM card in another device for the purpose of receiving a two-factor verification code sent to your trusted phone number to reset the Apple ID password in Settings or from the Support app. This may seem like a hassle, but usually Account Recovery can be avoided with doing so.

• It does not have to be an Apple device. 
• It does have to be a cellular device. Meaning, if you have a cellular iPad and you insert the SIM card in the iPad, this will not work and you will not receive the verification code. Although the iPad is a cellular model, the cellular functions on iPad are used for cellular data access only. iPad does not have a Phone app (at this time) and cannot make or receive cellular calls/messages. 
• Make sure to have someone send you a SMS message to verify your phone number/cellular service has no issues prior to attempting to send the verification code. 
• If the device you are trying to do this with is eSIM-compatible only, you cannot use this option. There is no physical SIM card to remove or insert on these devices. To repeat, this does not apply to eSIM-compatible only devices.

IMPORTANT: Note that two-factor verification codes are always sent to the trusted device by default. To send a code to the trusted phone number, you will have to select ‘Didn’t receive verification code?’ > ‘text me’ or ‘Cant get to any of my devices’ > ‘text me’.

If your device has been lost or stolen, and you are unable to sign into your Apple Account to locate the device and/or put it in Lost Mode because you can’t receive the two-factor verification code, go to iCloud.com/find. 

After entering the Apple Account email and password, click the find iPhone button to continue signing in without having to enter a verification code. Please note that if you do not know your password, you cannot use this option to locate the device with Find My on iCloud.com. 

Account Recovery Contacts are available on iPhone, iPad, iPod touch, or Mac. They are considered the last option to use before proceeding with Account Recovery.

The purpose of a recovery contact is to help you verify your identity and regain access to your account and all of your data if you ever get locked out. This is done by having the recovery contact generate a six-digit verification code “recovery code” to provide to you as an additional verification option. 

IMPORTANT: Setting up a recovery contact isn’t required, but it can make regaining access to your account and data easier. This means not everyone will have a recovery contact set up. If that is the case, proceed with Account Recovery as normal.

Requirements

Anyone that meets these requirements can be considered for an Account Recovery Contact. This means the request can be sent to someone outside of Family Sharing, and if you do not have their info saved in your Contacts app.

• Everyone involved must have an Apple Account. 
• All devices signed into iCloud Settings should be updated to latest OS.
• All Apple Accounts must use two-factor authentication. 
• All devices being used to send and receive Recovery Contact requests must have iMessage enabled. 
• All parties involved must be over the age of 13 to use this feature. 

How to provide the verification code to someone

1. Go to Settings, then tap your name.
2. Tap Sign in & Security > Recovery Contact.
3. Tap your contact’s name.
4. Tap Get Recovery Code.
5. When your friend is ready, read them their recovery code. After they enter it on their device, they’ll be able to reset their password and regain access.

Below is a short recap of the order of steps to take to regain access to your Apple Account prior to setting up Account Recovery:

1. Reset Apple Account password or trusted phone number from iCloud Settings on a device that is passcode protected and fully signed into iCloud settings.
2. Use the Apple Support app or iCloud Settings to receive a verification code to the trusted phone number on file in order to reset the Apple Account password. 
3. Reach out to your Account Recovery contacts. 
4. Set up Account Recovery.

Signed into iCloud Settings

If you are signed into iCloud Settings already on that device, or another device, and the devices are passcode protected, you can reset your password in your Settings. Settings > Name > Sign in & Security > Change Password.

Note: If you click on Settings > Name and it prompts you to enter your Apple Account password, you are not fully signed into iCloud Settings and cannot use this option.

Not signed into iCloud Settings, and same trusted phone number

If you are not currently signed into iCloud Settings, but you have the same trusted phone number, you can use the Support app to reset your password. You can get a friend or family member to download the Support app on their device. You will then reset your password by confirming a six-digit verification code sent to the trusted phone number.

Not signed into iCloud Settings, and different trusted phone number

If you are not currently signed into iCloud Settings, you no longer have access to your trusted phone number or you have recently changed your number, you will need to set up Account Recovery in order to regain access to your Apple Account. This can be done at iforgot.apple.com by entering your Apple Account email address to get started. In order to start Account Recovery, you must be able to confirm the Trusted Phone Number currently associated to the account, even if you no longer have that number. If you cannot confirm the number, you cannot set up Account Recovery to regain access to the account.

Go to iforgot.apple.com > select Reset Password > enter your Apple Account email address > confirm the trusted phone number > When verification code is sent, select ‘Can’t use this number’ or ‘Don’t have access to this number’ > enter your new trusted phone number, as well as the verification code sent to it. You should be able to complete the recovery from here.

Not signed into iCloud Settings, different trusted phone number, and can’t confirm the original phone number

You will not be able to regain access to this account. I would suggest creating a new Apple Account or attempting to confirm the trusted phone number to set up Account Recovery.

Setting up Account Recovery through device settings and/or the Support app is self-explanatory. These are the steps to successfully set up Account Recovery using iforgot.apple.com.

It is important to note that the order of which you are asked to verify account information is irrelevant, and also varies. Instead, focus on the correct options you must select to start the Account Recovery. These are usually listed under the verification code boxes in blue when you are asked to confirm your account information. 

Examples include: 

• “Can’t use this number?”
• “Can’t get to any of your devices?”
• “No longer use this card?”
• “Continue Anyways?”
• “Can’t use any of these options?” 

1. Go to iforgot.apple.com and enter the affected Apple Account email address. 
2. You will then be prompted to confirm the trusted phone number on file, and will only see the last two digits of the phone number, as a hint. Confirm the phone number.
3. You will then be presented with several different options on how to regain access to your Apple Account. These are all the options we just covered in the last section. (Trusted device, Support app, verification code to phone number) At the bottom of the page in blue, select ‘Can’t use any of these options?’.
4. On the next page, at the very bottom, select ‘Continue Anyways’. This page briefly warns you about the estimated recovery timeframe to regain access being longer.
5. You are then asked for a verification code to be sent to your trusted phone number. Select “don’t have access to this number?” if you don’t have access to your trusted phone number. Before the Account Recovery is successfully set up,  you will be asked for a new phone number and will have to enter a verification code that is sent to it. This then becomes the phone number associated to the Account Recovery request. 
6. Now you will be prompted to enter the verification code sent to your Apple Account email address. Enter the code, or select “can’t use this email address?” If your Apple Account email address ends in @iCloud.com, you will not be able to receive this verification code.
7. Next, if applicable, confirm the primary payment information on file with the Apple ID, or select “don’t have access to this card?’ If the card is no longer valid, has expired, has been reissued, or is being pulled from Apple Pay, then you cannot use this option. Just select that you don’t have access to the card.

You will then see one of the two messages:

“Password Reset Requested. We are evaluating your information to determine when you will be able to reset your password.”

This confirms the account recovery has successfully been created; you will receive an update via email within 24-72 hrs from iforgot.apple.com. The initial confirmation email confirming Account Recovery has been sent to the Apple Account email address.

“Since you were not able to verify your account information, your password can’t be reset at this time.”

This means you couldn’t confirm any piece of account information required to set up the Account Recovery. You will be unable to regain access to this account.

Apple sends status updates by default to the primary Apple Account email address. If your Apple Account ends in @icloud.com, @me.com, or @mac.com, you will not be able to receive the emails. This also applies to you if you don’t have access to your email address on file and chose the option “can’t use this email” when you set up Account Recovery. 

Don’t waste time speculating on why you did not receive the automated text/call or email. You can check the account recovery request status at iforgot.apple.com at any time, and use the website to recover your account. The status update notifications just refer you back to the website.

When the account is ready to be recovered, you should receive an SMS or automated call to the trusted or recovery phone number. The SMS or automated call has instructions and directs you to iforgot.apple.com or apple.com/recover. When you visit iforgot.apple.com, you then receive an SMS or automated call with a recovery code that is necessary to complete the process.

This means that once the account is ready to be recovered, perform the following steps:

1. Go to iforgot.apple.com and enter the Apple Account email address.
2. Confirm the provided phone number for account recovery. Apple then sends an account recovery code via SMS message or a phone call. It’s a standard, six-digit verification code. 
3. Enter the account recovery code in the field provided and click Continue.

When you correctly enter the code, you can choose a new password, verify the trusted number, and sign in normally.

Hope this helps!

Source